{"id":"01M6MYE0V3Y94W27VT2D3K8R6M","product_id":"01M6MYE0CP8HJ6Y504NM6FWBZB","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Talos found cleartext information disclosure in 27US firmware 1.8.7.0D (CVE-2018-3947). Its timeline records a confirmed fix in September 2018 and firmware release in October 2018.","body_md":"Cisco Talos documented information disclosure through cleartext phone-to-camera communications on Yi Home Camera 27US firmware 1.8.7.0D (CVE-2018-3947). Talos confirmed a vendor fix in September 2018, with new firmware released in October 2018.","method":null,"source_method":null,"sources":[{"title":"TALOS-2018-0616: Yi Home Camera cleartext transmission","url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0616","publisher":"Cisco Talos","publishedAt":"2018-10-31"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Corrected vulnerability type, advisory ID, tested version and severity; removed unrelated CVE and firmware-downgrade assertion. This is not independent device verification.","created_at":1793851851619,"updated_at":1793917832000,"slug":"yi-technology-yi-home-camera-27us","vendor":"Yi Technology","model":"Yi Home Camera 27US","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYE0V3Y94W27VT2D3K8R6M","product_url":"https://isitspying.com/p/yi-technology-yi-home-camera-27us","findings":[{"id":"accuracy:01M6MYE0V3Y94W27VT2D3K8R6M:0","report_id":"01M6MYE0V3Y94W27VT2D3K8R6M","kind":"known_cve","severity":"critical","detail":"CVE-2018-3947: cleartext communications on tested firmware 1.8.7.0D; Talos CVSSv3 9.0.","ai_model":null}],"contacted_hosts":[],"evidence":[]}